Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/acb7d1354a64b71d1b219b72e6778d7d174b6435.roa
File: acb7d1354a64b71d1b219b72e6778d7d174b6435.roa (raw, json)
Hash identifier: +ofb5orfSYdVeLmt0SZ3qkGMOnt43hgcrXYD77ixGCE=
Subject key identifier: 75:0A:71:D6:F4:F9:04:96:B2:ED:C1:F2:2D:61:E5:A3:A8:1D:26:7F
Certificate issuer: /CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
Certificate serial: 1DBB73
Authority key identifier: 5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/acb7d1354a64b71d1b219b72e6778d7d174b6435.roa
Signing time: Fri 22 Sep 2023 16:37:53 +0000
ROA not before: Thu 21 Sep 2023 16:37:53 +0000
ROA not after: Mon 22 Sep 2025 16:37:53 +0000
asID: 22860
IP address blocks: 200.24.224.0/20 maxlen: 24
190.113.0.0/19 maxlen: 24
2800:8f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948531 (0x1dbb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
Validity
Not Before: Sep 21 16:37:53 2023 GMT
Not After : Sep 22 16:37:53 2025 GMT
Subject: CN=acb7d1354a64b71d1b219b72e6778d7d174b6435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:b8:02:c9:ae:10:a4:25:33:ff:a2:b2:e7:
b2:c4:55:41:8c:92:91:ab:e6:d3:44:15:e3:cb:94:
c8:3a:b0:07:90:82:da:01:7e:8c:a9:d2:90:4b:64:
40:21:9c:22:a1:4c:80:48:63:90:ae:ce:40:03:e4:
29:5d:80:aa:d6:28:a9:73:98:09:68:78:0e:7e:90:
54:c5:12:88:79:4b:73:4b:26:0f:9b:40:6a:3f:f0:
97:bb:b5:bc:b8:67:6c:d7:0d:a7:42:dd:6a:18:9f:
cc:98:ed:fe:d3:16:f3:c1:49:27:c8:3e:a2:a2:e4:
2c:b1:78:b5:8b:f6:e9:8a:eb:1e:1b:b7:f9:95:13:
82:94:f1:37:c3:11:52:6c:bd:75:08:90:67:c5:55:
38:f7:0d:9c:d9:c4:d5:bb:12:b0:82:af:d1:81:f2:
58:5f:d1:ab:da:24:aa:11:12:de:75:6d:af:80:33:
ec:ae:c0:b5:8d:af:bf:48:29:87:9d:fb:c7:38:04:
74:23:5d:68:3a:da:c0:30:8e:f2:bb:2c:5d:63:41:
99:8c:a9:f7:e8:17:ae:4d:82:16:66:f5:5b:5b:2f:
62:c5:65:eb:8c:68:7b:d3:b8:c7:ea:3c:d0:c6:04:
63:a7:9e:a0:9e:8f:d4:cc:c4:6a:38:6d:06:72:fa:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0A:71:D6:F4:F9:04:96:B2:ED:C1:F2:2D:61:E5:A3:A8:1D:26:7F
X509v3 Authority Key Identifier:
keyid:5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/acb7d1354a64b71d1b219b72e6778d7d174b6435.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.113.0.0/19
200.24.224.0/20
IPv6:
2800:8f0::/32
Signature Algorithm: sha256WithRSAEncryption
9d:26:eb:b3:31:c2:22:35:90:01:69:a2:07:e4:4b:0d:e9:af:
23:e6:20:f9:7d:c5:42:cc:32:74:ea:08:6a:19:aa:90:d8:47:
a5:a5:cb:ac:24:e4:5b:51:ca:4f:71:dd:ad:3f:fb:0b:18:06:
36:76:b5:c5:42:30:3f:2d:53:f6:92:d6:7e:0c:2b:6f:e9:7c:
b5:62:e7:dc:9f:16:43:7e:a3:c1:7a:55:a8:a2:a0:b9:79:91:
9f:a8:95:82:04:28:a1:09:01:03:e4:15:4f:0d:16:61:72:f7:
2d:d6:54:ac:d6:64:42:b2:01:e1:e3:fc:80:18:b6:bc:eb:f0:
02:6b:5d:bc:67:a0:8f:f9:93:0c:9b:4e:3c:5c:78:f2:87:eb:
63:58:f4:8d:db:27:51:2a:19:76:39:1a:9a:ca:f4:51:2e:fb:
fe:1a:cd:49:ae:6c:73:c0:59:ec:8a:b2:6f:4f:2a:1f:f3:89:
51:f6:bd:c4:b9:0c:45:a3:d0:19:43:90:0a:a8:e7:d7:91:53:
d4:21:e3:6b:4a:b8:66:37:67:93:70:7f:86:1e:01:30:58:3b:
65:b1:d2:66:2c:86:87:6d:7e:01:a4:5b:f4:f2:06:86:ef:27:
9d:86:e8:2c:ef:37:d6:ae:19:09:6b:df:01:a6:3c:6c:e6:c4:
01:a1:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org